Netsafe advisory 8 March 2018
CERT NZ has been informed that there is an active RealMe phishing email scam that is targeted toward New Zealanders.
Advice from CERT NZ
The phishing email states that the user has a private message and they need to access their RealMe account. The web link in the email then takes the user to a fake RealMe website that asks the user to validate their identity and upload personal documents (eg: passport and driver’s license).
The emails are currently coming from non-government email addresses and direct users to non-government web sites.
If you receive an email related to RealMe:
- Check the sender’s email address. RealMe is a service provided by New Zealand government. Any communication would be sent from the govt.nz domain.
- Check the email message and what is being asked. If you receive an email message about your account that is not expected, it may be a phishing email.
If you receive this RealMe phishing email, CERT NZ strongly recommends you do not click the web link. You can report the email to CERT via their website.
If you’re affected
If you have clicked the web link and have entered information into the website:
If you need further advice our helpline is open from 8am – 8pm Monday to Friday and 9am – 5pm on weekends.
- Email firstname.lastname@example.org
- Call us toll free on 0508 NETSAFE (0508 638 723)
- Online report form at netsafe.org.nz/report
Keep up to date